PT-2018-18094

Name of the Vulnerable Software and Affected Versions YzmCMS version 3.6 Description The issue allows remote attackers to discover the full path of the application via a direct request to "application/install/templates/s1.php". Recommendations For YzmCMS version 3.6, consider restricting access t...

CVE-2018-7479: Exposure of Resource to Wrong Sphere

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php...